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(57) The device, and a respective system, compris- 
es a microcontroller (1 ) for signal processing and an in- 
terface controller (2) for communicating witli an IC card 
(3), the interface controller (2) being coupled between 
the microcontroller (1) and the IC card (3). According to 
the invention, the device comprises a reset button (6) 
for resetting the microcontroller (1 ) in case of a malfunc- 
tion, the reset button (6) being accessible to a customer, 
and a reset signal from the reset button (6) simulates an 
IC card extraction or a card supply voltage shut down. 



In a special embodiment, the reset signal from the reset 
button (6) is applied to the microcontroller (1 ) and to the 
interface controller (2), and the signal (9) from the reset 
button (6) resetting the microcontroller (1) is delayed by 
a delay circuit (8) with respect to the signal (1 0), which 
resets the interface controller (2). The signal from the 
reset button (6) is advantageously combined with the 
signal from a card presence contact (5) via a logical OR- 
combination (7), and then coupled to a card presence 
input (CPR) of the interface controller (2). 
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Description 

[0001] The invention relates to a systenn comprising 
a nnicrocontroller, an interface controller and an IC card 
as a portable data medium, and a respective device 
communicating with the portable data medium. Systems 
of this kind are used for example for Pay TV, electronic 
payment, or banking services. 

[0002] For these applications compact portable data 
media are used, having the size of about a credit card, 
and which comprise an integrated card-controller, or at 
least an integrated memory, for data exchange with a 
respective device. Data media of this kind are known for 
example as smart card, IC card or identification card, 
and described for example in EP-A-0 633 544. As a gen- 
eral term for these data media, the expression "IC card" 
will be used in this description. 

[0003] Systems as described above are known for ex- 
ample from WO 98/00772 and WO 97/25685. A stand- 
ard with a specification for a special type of IC cards is 
defined in ISO/IEC 781 6-3:1 997(E). In this standard the 
design and the operation procedures for integrated cir- 
cuit cards with contacts (identification cards) are de- 
scribed. 

[0004] As an interface controller for providing the data 
exchange between the microcontroller of a respective 
device and an IC card, integrated circuits are known, for 
example TDA 8004T from Philips Semiconductors, 
which are coupled between the microcontroller and the 
IC card. The interface controller provides also the volt- 
age supply and the control functions with automatic ac- 
tivation and deactivation sequences for the IC card. 
[0005] The object of the invention is to provide a sys- 
tem with an IC card as described above, which gives a 
user an improved safety of operation. 
[0006] This object is achieved for a system by means 
of the invention as specified in claim 1 , and for a respec- 
tive device operating with an IC card, by means of the 
invention as defined in claim 4. Advantageous develop- 
ments of the invention are specified in the subclaims. 
[0007] The invention relates to the problem that dur- 
ing the operation of a device with an IC card, the micro- 
controller of this device may run into an indefinite oper- 
ating state, in which the device is no more working prop- 
erly. According to the invention, the device comprises 
therefore a reset button for resetting the microcontroller, 
which is accessible to the customer, and a signal from 
the reset button simulates an extraction of the IC card, 
which provides a reset of the system. As an alternative, 
it may simulate an IC card supply voltage shut-down. 
The simulation of the IC card extraction is realised for 
example using a logical OR-combination, which inputs 
are coupled to the reset button and to a card presence 
contact, and which output is coupled to a card presence 
input of the interface controller. 

[0008] In a further aspect of the invention, a delay is 
provided for the pulse resetting the microcontroller, for 
delaying this pulse with respect to the pulse resetting 



the interface controller. This aspect relates especially to 
a system, in which the clock of the interface controller 
is coupled to and depending on the clock of the micro- 
controller. When in this system the microcontroller is re- 

5 set, the clock signal stops and therefore also the inter- 
face controller Then a controlled shut-down of the IC 
card is no more possible. When the reset pulse for the 
microcontroller is delayed with respect to the pulse re- 
setting the interface-controller, the interface controller 

10 provides the respective deactivation sequences for the 
IC card, before the clock signal from the microcontroller 
stops. 

[0009] Usually the IC cards are contacted by use of 
metal contacts, but wireless applications are also within 
15 the invention. 

[0010] Preferred embodiments of the invention are 
now explained in more detail with reference to schemat- 
ic drawings, which show: 

20 Fig. 1 a system comprising a microcontroller, an in- 
terface controller and an ICcard (prior art), and 
Fig. 2 the system of Fig. 1 , comprising in addition a 
reset circuit with a delay for the microcontrol- 
ler. 

25 

[001 1] The system as shown in Fig. 1 comprises a mi- 
crocontroller 1 and an interface controller 2 for commu- 
nicating with a portable data medium, especially an IC 
card 3, as defined in the preamble of the description. 

30 The microcontroller 1 and the interface controller 2 are 
arranged with in a device, for example a satellite receiver 
or a settop box. The respective IC card 3 provides in this 
embodiment special television services, depending on 
the country, in which the device is used, and depending 

35 on the options of a user, with regard to Pay-TV. With the 
IC card 3 the user informs the microcontroller 1 about 
the respective authorisation. 

[0012] As the interface controller 2 an integrated cir- 
cuit is used, for example TDA 8004T of Philips Semi- 

40 conductors, which complies with the ISO 781 6-3 stand- 
ard. This interface controller IC provides the data ex- 
change and automatic activation and deactivation se- 
quences for the IC card 3, also the necessary supply 
voltages as well as protection functions for the card con- 

45 tacts. 

[0013] The interface controller 2 is controlled by the 
microcontroller 1 via a port, which is coupled to the in- 
terface controller 2, and which provides control and re- 
set functions RESET, Control, as well as data input/out- 

50 put connections I/O. In this embodiment, the clock for 
the interface controller 2 is also provided by the micro- 
controller 1 , signal CLOCK1 from a PLL circuit 4 within 
the microcontroller 1 . The clock signal CLOCK2 from the 
interface controller 2 to the IC card 3 may have the same 

55 frequency as the CLOCK1 signal, or may differ in fre- 
quency. 

[001 4] When the IC Card 3 is inserted into the device, 
a card presence contact 5 is switched, which informs 
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the interface controller 2 via a signal CPR, that an IC 
card 3 is inserted. Then the IC card 3 is activated by the 
interface controller 2 by providing a supply voltage VCC 
and a clock signal CL0CK2, and started with a reset via 
line RESET for performing data exchange via the I/O 
data lines. The detailed activation and operation for the 
IC card 3 is described in the specification of the TDA 
8004T as well as in ISO/IEC 781 6-3, to which is referred 
herewith. 

[0015] During the operation of the device, the micro- 
controller 1 may run into an indefinite operating state, in 
which the device is no more working properly. A user 
may suspect then a serious malfunction and will be irri- 
tated, and may switch the device then off and on again. 
The device comprises therefore a reset button 6, acces- 
sible to the user, which is coupled to a reset input RE- 
S ET of the microcontroller 1 , for resetting the microcon- 
troller 1 and returning herewith to normal operation of 
the device. 

[0016] In Fig. 2 a system comprising a microcontroller 

1 , an interface controller 2 and an IC card 3 as described 
according to Fig. 1 is shown. In addition, the system 
comprises a reset circuit, via which the signal from the 
reset button 6 is applied both to the microcontroller 1 
and to the interface controller 2. The reset signal from 
the button 6 is advantageously coupled via a logical OR- 
combination 7 with the line from the card presence con- 
tact 5 and then applied to the input CPR of the interface 
controller 2. When the button 6 is pushed by a user, the 
interface controller 2 assumes a removal of the IC card 
3, and provides then immediately the deactivation of the 
IC card 3. 

[0017] Between the button 6 and the reset input RE- 
SET of the microcontroller 1 a delay 8 is provided, via 
which the signal 9 resetting the microcontroller 1 is de- 
layed with respect to the signal 1 0 resetting the interface 
controller 2. This is especially advantageous, when the 
clock for the interface controller 2, CLOCK1 , is provided 
by the microcontroller 1 . When the microcontroller 1 is 
reset in this case, the CLOCK1 signal stops, and there- 
fore also the interface controller 2. With the delay circuit 
8, having a delay for example of about 0.5 msec, suffi- 
cient time is provided for the interface controller 2 for 
deactivating the IC card 3, 

[0018] In this embodiment, a reset for the microcon- 
troller 1 as well as forthe interface controller 2 is caused 
by a logical "0". In normal operation of the device, the 
signals from the reset button 6 and the card presence 
contacts are therefore "1 ".To provide a logical OR-com- 
bination, an AND-circuit 7 is used for combining the sig- 
nals from the reset button 6 and the card presence con- 
tact 5. This results in a logical "0" for the interface con- 
troller2, when either a logical "0" is provided by the reset 
button 6 or by the card presence contact 5, 
[0019] The reset button 6 may be coupled also with a 
supply line providing the voltage VCC to the IC card 3, 
in which case a signal from the reset button 6 simulates 
a card supply voltage shut-down. The interface control- 



ler 2 may be provided also with its own circuitry for gen- 
erating the clock signal, which makes the interface con- 
troller 2 independent from the signal CL0CK1 . For this 
embodimentthedelay 8 is not necessary, because then 
5 in case of a reset the interface controller 2 can deacti- 
vate the IC card 3 Independent from the microcontroller 
1. 

[0020] The systems as described with regard to Fig. 
1 and Fig. 2 comply with the specification according to 
ISO/IEC 7816-3, but other applications lie also within 
the range of the invention. 

[0021] To the logical OR-combination 7 in addition al- 
so a reset signal from a watchdog circuit may be cou- 
pled. The watchdog circuit, known also as watchdog tim- 
er, is monitoring the proper operation of the microcon- 
troller and provides a timing function in that it is waiting 
a certain time period for a reset signal from the micro- 
controller, which the microcontroller provides periodical- 
ly during nomnal operation. In case of an software error, 
for example when the microprocessor is hanging in a 
loop, the reset signal for the watchdog circuit is no more 
generated, and then the watchdog circuit provides a re- 
set for the microcontroller. As a result, the microcontrol- 
ler provides a restart for returning to the normal mode 
of operation. The watchdog circuit may included for ex- 
ample within the microcontroller 1 . 
[0022] The reset signal from the watchdog circuit is 
applied advantageously to a second logical OR-combi- 
nation to combine this signal with a reset signal from the 
reset button 6, and the output of this OR-combination is 
coupled both to the delay 8 input and to an input of the 
first logical OR-combination 7. 
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35 Claims 

1 . System comprising a microcontroller (1 ), an IC card 
(3), an interface controller (2), and a reset button 
(6) for resetting the microcontroller (1), character- 

40 ized in that the reset signal from the reset button 
(6) simulates an IC card (3) extraction ora card sup- 
ply voltage (VCC) shut-down. 

2. System according to claim 1 , cliaracterized in that 

45 the signal (9) from the reset button (6) resetting the 
microcontroller (1 ) is delayed with respect to the sig- 
nal (10), which resets the interface controller (2). 

3. System according to claim 1 or 2, characterized in 
50 that the signal from the reset button (6) is combined 

with the signal from a card presence contact (5) via 
a logical OR-combination (7), and then coupled to 
the interface controller (2). 

55 4. Device comprising a microcontroller (1) for signal 
processing, an interface controller (2) for communi- 
cating with an I C card (3), when a respective ICcard 
is inserted, said interface controller (2) being cou- 
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pled between said microcontroller (1) and said IC 
card (3), and connprising a reset button (6) for re- 
setting the microcontroller (1), said reset button (6) 
being accessible to a customer, characterized in 
that a reset signal from the reset button (6) simu- 5 
lates an IC card (3) extraction or a card supply volt- 
age (VCC) shut-down. 

5. Device according to claim 4, characterized in that 

the signal (9) from the reset button (6) resetting the io 
microcontroller (1) is delayed by a delay circuit (8) 
with respect to the signal (1 0), which resets the in- 
terface controller (2). 

6. Device according to claim 4 or 5, characterized in 
that the signal from the reset button (6) is combined 
with the signal from a card presence contact (5) via 
a logical OR-combination (7), and then coupled to 
the interface controller (2). 

7. Device according to claim 6, characterized in that 

the device comprises a second logical OR-combi- 
nation to combine the signal from the reset button 
(6) with a reset signal from a watchdog circuit, which 
circuit is included for example within the microcon- 
troller (1 ), the output of the second OR-combination 
being coupled to both the delay (8) input and to an 
input of the first logical OR-combination (7). 

8. Device according to one of the preceding claims 4 30 
- 7, characterized in that the device is a settop box 
or a satellite receiver with an IC card operation for 
Pay TV or electronic payment. 
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